Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa
File:                     ec6a4160-ba41-3819-b792-defc017a5b48.roa (raw, json)
Hash identifier:          s7hvrrQVbKl3YEtZ8I7R7czF0yiLnKk/EJPPMjvDTSQ=
Subject key identifier:   15:4F:70:3E:F2:AD:C8:8C:F3:12:8C:89:84:33:59:E8:D2:1D:F0:05
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285847D56A2324E72E09025F716240
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa
Signing time:             Sun 10 Nov 2024 14:00:37 +0000
ROA not before:           Sun 10 Nov 2024 14:00:37 +0000
ROA not after:            Sat 08 Feb 2025 14:00:37 +0000
asID:                     396581
IP address blocks:        192.68.130.30/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d5:6a:23:24:e7:2e:09:02:5f:71:62:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Nov 10 14:00:37 2024 GMT
            Not After : Feb  8 14:00:37 2025 GMT
        Subject: CN=d0a48a78-35c3-4ce9-aad1-1e73803c801c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:ce:a2:48:13:ef:c7:0e:7c:3d:3e:32:83:
                    8e:f8:85:90:50:df:d8:39:34:92:e3:44:c0:3b:53:
                    c8:06:b6:ff:27:23:04:a1:44:ae:48:9f:fc:7b:d5:
                    83:cc:ad:e4:db:f5:a4:7d:2d:19:0e:04:9f:16:1b:
                    f1:55:7f:d1:ba:e9:ae:90:bc:6a:62:73:ab:f5:21:
                    14:0a:56:87:60:1a:92:01:b4:5c:86:0f:71:65:09:
                    74:9b:f6:47:16:ea:67:e6:ce:2f:23:f4:5f:4b:b7:
                    09:cb:a0:57:a7:b4:69:9c:be:7d:3f:0e:12:71:2c:
                    31:ee:5b:4d:1c:8e:46:26:65:7f:97:3b:21:91:bc:
                    f1:4b:3c:70:c4:01:04:7c:57:1f:ed:aa:9d:c0:51:
                    59:9b:0f:76:c8:69:10:f6:49:b3:1f:be:53:06:4d:
                    58:f0:18:7b:01:09:67:27:28:9b:2b:51:dd:fb:97:
                    35:ba:b3:00:6e:17:92:32:48:d6:d9:bb:0f:c8:f8:
                    b4:03:70:d0:32:05:d4:68:77:cd:9d:54:9b:83:3a:
                    69:89:66:2a:b8:4c:8c:5d:35:88:7d:f6:9f:a4:41:
                    67:11:b6:d3:8e:d0:b5:12:56:29:22:7d:92:24:46:
                    fb:05:d9:86:79:f1:0b:be:16:46:ab:0f:14:3d:4d:
                    34:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:70:3E:F2:AD:C8:8C:F3:12:8C:89:84:33:59:E8:D2:1D:F0:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/ec6a4160-ba41-3819-b792-defc017a5b48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.68.130.30/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:6a:ef:13:69:87:1d:a5:3f:2e:43:cc:19:41:12:0b:93:1e:
         c4:f0:8c:4f:51:fb:52:53:b0:db:5b:e1:0c:fa:44:a3:c0:a2:
         94:1f:62:2a:94:9b:fd:b3:71:8a:61:bf:c4:e8:89:a4:76:d3:
         2d:cb:64:e4:69:d0:e4:93:77:ef:19:d5:f0:a9:94:76:54:3a:
         77:99:56:92:cb:1e:e1:cd:5c:18:c6:f4:80:1e:03:b8:56:1f:
         0a:29:ba:8a:33:23:67:79:94:a2:73:cd:41:ce:e0:39:ab:ad:
         f2:04:1d:fd:6e:74:a8:f7:f1:54:fe:9d:a0:88:71:60:e7:78:
         ca:87:93:f3:50:45:d5:6f:9f:fe:df:62:b5:89:a9:75:0b:74:
         8b:d0:58:cc:b1:6d:f9:e5:7d:ff:a6:95:1e:1a:c6:f8:ba:42:
         92:58:46:74:69:1c:e4:c4:d9:54:34:dc:5b:9a:14:8a:7a:40:
         ae:70:d8:27:e4:74:4e:16:23:ca:1f:ca:4f:53:3e:76:a0:82:
         60:18:0c:cd:11:df:29:9f:88:8c:61:ba:0a:ba:21:89:9b:9e:
         1d:23:38:98:b4:10:be:06:59:c2:f8:e3:da:a9:c4:0c:11:d0:
         d3:df:c4:f1:3f:12:c6:35:b7:1c:af:d0:5f:de:7d:6e:78:95:
         60:e7:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:34:18 2024 by rpki-client on console-ams.rpki-client.org